XML2_jll
JLSEC-2025-91Medium 5.5UpstreamUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 …JLSEC-2025-196High 7.5UpstreamA flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer s…JLSEC-2025-90High 7.5UpstreamIn libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschem…JLSEC-2025-89High 7.5UpstreamIn libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur …JLSEC-2025-88High 7.5Upstreamlibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatM…JLSEC-2025-87High 7.7Upstreamlibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in...JLSEC-2025-86Critical 9.8Upstreamlibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillN…JLSEC-2025-85High 7.8UpstreamxmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.JLSEC-2026-468Critical 9.1UpstreamNo summary availableJLSEC-2025-84High 7.5UpstreamAn issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7JLSEC-2025-83High 7.5UpstreamAn issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5JLSEC-2025-82Medium 6.5WithdrawnUpstreamlibxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory al…JLSEC-2025-81Medium 6.5UpstreamXmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the...JLSEC-2025-80Medium 6.5UpstreamAn issue was discovered in libxml2 before 2.10.4JLSEC-2025-79Medium 6.5UpstreamIn libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL point…JLSEC-2025-78High 7.8UpstreamAn issue was discovered in libxml2 before 2.10.3JLSEC-2025-77High 7.5UpstreamAn issue was discovered in libxml2 before 2.10.3JLSEC-2025-76Medium 6.1UpstreamPossible cross-site scripting vulnerability in libxml after commit 960f0e2.JLSEC-2025-75Medium 6.5UpstreamIn libxml2 before 2.9.14, several buffer handling functions in buf.c (`xmlBuf*`) and tree…JLSEC-2025-74High 7.5Upstreamvalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.JLSEC-2025-73Medium 6.5UpstreamA flaw was found in libxml2JLSEC-2025-72High 8.6UpstreamThere is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.…JLSEC-2025-71High 8.8UpstreamThere's a flaw in libxml2 in versions before 2.9.11JLSEC-2025-70Medium 5.9UpstreamA vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagat…JLSEC-2025-69Medium 6.5UpstreamGNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in...JLSEC-2025-68High 7.5UpstreamxmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certai…JLSEC-2025-67High 7.5UpstreamxmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memor…JLSEC-2025-66High 7.5UpstreamxmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak…